Cysterra
1Introduction
Welcome to Cysterra. We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy describes how we collect, use and protect the information you provide when you visit cysterra.shop (the "Website") and when you place an order for Cysterra food supplement (the "Product").
This Policy applies to visitors and customers across all regions where the Website is available, including Hungary, Romania, Croatia and Bulgaria. By using the Website, you acknowledge that you have read and understood this Privacy Policy.
Summary: We only collect the data strictly necessary to process your order and deliver the Product to you. We never sell your personal data to third parties.
2Data controller
The data controller responsible for the processing of your personal data is Cysterra ("we", "us", "our").
For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the contact form available on the Website. We aim to respond to all requests within 30 days.
3Data we collect
We only collect data that is necessary to fulfil your order and to improve our services. The categories of data we process are:
3.1 Data you provide directly
- Identification data: first name and last name.
- Contact data: telephone number (used to confirm your order and coordinate delivery).
- Delivery data: delivery address, city, postal code, country.
- Order data: product selected, quantity, order value, payment method.
3.2 Data collected automatically
- Technical data: IP address, browser type and version, operating system, device type.
- Usage data: pages visited, time spent on the Website, referring URLs.
- Cookie data: see Section 8 below for details.
Note: We do not collect or process special categories of personal data (such as health data, biometric data, or data revealing racial or ethnic origin).
4Purpose & legal basis of processing
We process your personal data for the following purposes and on the following legal bases under Article 6 of the GDPR:
| Purpose | Data categories | Legal basis |
|---|---|---|
| Order processing & delivery | Name, phone, address, order details | Performance of a contract (Art. 6(1)(b) GDPR) |
| Customer support & order confirmation | Name, phone | Performance of a contract (Art. 6(1)(b) GDPR) |
| Legal & accounting obligations | Order and invoice data | Legal obligation (Art. 6(1)(c) GDPR) |
| Website analytics & improvement | Technical, usage, cookie data | Consent (Art. 6(1)(a) GDPR) |
| Marketing communications (if applicable) | Name, phone | Consent (Art. 6(1)(a) GDPR) |
6Data retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law:
- Order-related data: retained for the duration of the contractual relationship and for the period required by applicable accounting and tax law (typically 5–10 years).
- Marketing data: retained until you withdraw your consent.
- Technical & cookie data: retained according to the cookie settings you have chosen (see Section 8).
7Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: you can request a copy of the personal data we hold about you.
- Right to rectification: you can ask us to correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): you can ask us to delete your data, subject to legal retention obligations.
- Right to restrict processing: you can ask us to limit how we use your data.
- Right to data portability: you can receive your data in a structured, machine-readable format.
- Right to object: you can object to processing based on legitimate interests.
- Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.
- Right to lodge a complaint: you can file a complaint with your national data protection authority.
To exercise any of these rights, please contact us via the contact form on the Website. We will respond within 30 days of receiving your request.
9Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include:
- Encrypted transmission of data (HTTPS/TLS).
- Access controls and authentication for our internal systems.
- Regular review of our data collection, storage and processing practices.
- Contractual data protection obligations with our service providers.
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
10Children's privacy
Our Website and Product are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will delete such data promptly.
11Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.
12Contact
If you have any questions, concerns or requests regarding this Privacy Policy or the way we handle your personal data, please contact us through the contact form available on the Website.
We take all privacy-related inquiries seriously and will respond within 30 days at the latest.